[AKS] `az aks update`: Add support to remove existing certificates by setting the value of `--custom-ca-trust-certificates` to an empty file #2920